Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
Alt-Svc
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-Request-ID
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
X-XSS-PROTECTION
Server-Timing
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Via
X-Robots-Tag
X-Backend
X-Cache-Group
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Proxy-Cache
X-Hacker
X-Server
X-UA-Device
X-Rq
X-Server-Powered-By
X-Age
Allow
X-Vhost
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Amz-Version-Id
X-Dispatcher
Grace
X-LiteSpeed-Cache
P3p
Cf-Apo-Via
Nel
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
X-WebKit-CSP
Ali-Swift-Global-Savetime
Accept-CH
X-Pingback
X-Node
X-Host
X-Server-Id
X-OneAgent-JS-Injection
Surrogate-Control
X-Backend-Server
X-CST
X-Readtime
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Cache-Lookup
X-Content-Security-Policy-Report-Only
Permissions-Policy
Request-Id
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Application-Context
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
X-Response-Time
X-Edge
X-HW
Accept-Ch-Lifetime
Accept-CH-Lifetime
X-Ua-Compatible
X-Mod-Pagespeed
Content-Location
X-Clacks-Overhead
X-Url
X-Midtier
X-Oneagent-Js-Injection
X-ECACHE
Rating
X-ESI
X-Ruxit-JS-Agent
X-Amz-Server-Side-Encryption
X-Country
X-Mcache
Xkey
X-Litespeed-Cache
X-Upstream
X-Vname
X-PC
X-TtlSet
X-Vcap-Request-Id
Cache-Tag
X-D2id
X-MS-InvokeApp
X-Rack-Cache
X-Cdn-Fetch
X-Kinja
X-Use-Magma
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
X-Element-Page-Cache
X-GoogleNews-Bot
X-Exp-Id
X-Exp-Variant
Verso
Edge-Control
X-Cache-TTL
X-Ruxit-Js-Agent
RTSS
Fastly-Restarts
X-Powered-By-Plesk
X-VARITI-CCR
Origin-Trial
X-Ac
X-Content-Type
X-Navigation-Version
Accept-Ch
X-Abt-Application-Version
X-Cached
X-Ttl
X-Goog-Hash
Service-Worker-Allowed
X-WebKit-CSP-Report-Only
X-Country-Code
X-GitHub-Request-Id
Display
Pagespeed
X-Middleton-Display
X-Sol
X-Amz-Rid
X-Mg-S
X-Browser-Type
X-Dw-Request-Base-Id
SPRequestGuid
X-SharePointHealthScore
X-Server-Name
Cross-Origin-Opener-Policy
X-Varnish-TTL
X-B3-TraceId
Arr-Disable-Session-Affinity
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
X-Instrumentation
AR-Request-ID
AR-SID
X-Middleton-Response
Response
AR-ATIME
X-Powered-CMS
AR-PoweredBy
X-Amzn-Trace-Id
SPIisLatency
SPRequestDuration
X-Cache-Key
AR-CACHE
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Fastly-Request-ID
X-Version
X-Jurisdiction
X-HP-Trace-Id
X-HP-Webp
X-Cnection
X-Accel-Expires
Cache-Tags
X-Times
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-T
X-NF-Request-ID
Front-End-Https
Cache-Status
X-Fastcgi-Cache
Edge-Cache-Tag
X-MSEdge-Ref
Pinterest-Generated-By
X-Pinterest-Rid
Pinterest-Version
X-Px
X-Ser
X-Hits
Nginx-Cache
Public-Key-Pins
X-Client-IP
X-Recruiting
MRF-Tech
X-Ua-Device
X-B3-TraceId-Primal
Mrf-Cache-Status
X-NWS-LOG-UUID
X-B3-Traceid
X-LLID
X-Request-Received
X-Request-Processing-Time
X-Frontend
Server-Node
X-RateLimit-Remaining
X-Shield-Request-Id
X-Webkit-CSP
X-Ua-Browser
Payment
X-Kinja-CCPA
Access-Control-Request-Method
X-DIS-Request-ID
TP-Cache
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Goog-Metageneration
X-HS-Combine-CSS
X-HS-Hub-Id
S
X-HS-Cache-Config
X-HS-Content-Id
MicrosoftSharePointTeamServices
X-RateLimit-Limit
TP-L2-Cache
X-LB-Cache
X-Content-Digest
X-FastCGI-Cache
X-Distributor
Content-MD5
Realpath
X-Request-Handler-Origin-Region
X-Microsite
X-Geo-Country
X-Hostname
X-Webkit-CSP-Report-Only
X-Ezoic-Cdn
X-Page-Id
X-FB-Debug
Fastcgi-Cache
Access-Control-Allow-Method
X-GUploader-UploadID
X-Ratelimit-Remaining
X-Forwarded-For
Accept-Charset
X-Cluster-Name
X-Correlation-Id
X-Protected-By
X-Rid
X-Amz-Apigw-Id
X-Amzn-RequestId
X-PressLabs-Stats
X-Seen-By
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Envoy-Decorator-Operation
Cleartype
X-XRDS-Location
X-B3-Sampled
TCN
DC
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Ratelimit-Limit
X-Newrelic-App-Data
X-Origin-Server
Referer-Policy
X-Debug-Info
X-Mobile
X-Webkit-Csp
X-Varnish-Backend
Cross-Origin-Resource-Policy
X-Aspnet-Version
X-Git-Hash
X-Logged-In
X-Origin-Cache
X-Azure-Ref
X-Varnish-Grace
X-Contextid
X-Server-ID
X-Edge-Location-Klb
X-Kinsta-Cache
X-App-Environment
X-Route-Name
X-Grace
X-Flags
Alternate-Protocol
Surrogate-Key
X-Revision
X-Providence-Cookie
X-Amz-Replication-Status
X-Fb-Rlafr
X-Request-Guid
X-Aspnet-Duration-Ms
X-Is-Crawler
X-Content-Options
Count-Hit
X-TT
Healthy
X-IPS-LoggedIn
X-Amz-Meta-S3cmd-Attrs
X-Client-Ip
X-Wix-Request-Id
X-Forwarded-Proto
X-Whom
X-App-Server
Frame-Options
X-Hosted-By
Charset
X-TTL
X-Akamai-Edgescape
MS-Author-Via
Viewport
WPO-Cache-Message
WPO-Cache-Status
Filterid
X-Daa-Tunnel
X-Id
Paypal-Debug-Id
X-Magnolia-Registration
X-B
X-Backend-Name
Retry-After
Section-Io-Cache
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Amp-Access-Control-Allow-Source-Origin
X-F-Cache
X-Trace-Id
X-Activity-Id
X-Cache-Control
X-Az
SRV
X-AppVersion
X-Www-Served-By
X-Proxy-Cache-Info
Server-Name
X-Cache-Age
X-Type
X-Varnish-Server
X-App-Version
X-Oracle-Dms-Ecid
Refresh
X-Response-Served-From
X-Http-Reason
X-ARC
Akamai-GRN
X-Cache-Rule
Host
X-Proxy
X-Instance
SD-X-WS
X-Original-Request-Id
X-Rule
X-Oracle-Dms-Rid
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Status
X-Edge-Location
X-Rocket-Nginx-Serving-Static
Version
X-UUID
Protected
X-Cache-Grace
X-Akamai-Request-ID2
X-User-Agent
X-Varnish-Age
X-EdgeConnect-Cache-Status
X-RateLimit-Reset
Front
X-Cacheable-TTL
X-FW-Version
X-COUNTRY
X-FW-Serve
X-Framework
X-FW-Dynamic
X-FW-Hash
X-Environment-Context
X-Unique-Id
X-FW-Static
X-FW-Server
X-FW-Type
X-Is-Bot
X-Jobs
From-Origin
X-Page-View
X-Region
X-Rendered-As
X-L-Path
Fastly-SWR
X-N
Fastly-SIE
X-Cache-Time
X-Adobe-Loc
Access-Control-Request-Headers
X-Adobe-Content
X-ProcessESI
X-RemovedCookies
X-Tumblr-Pixel
X-Tumblr-User
X-G
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
ServerID
X-Time
X-Load-Cache
X-Upgrade-Enabled
X-Source
X-Varnish-Ttl
X-Language
Country
Content-Disposition
X-Datadog-Trace-Id
X-Drupal-Cache-Tags
X-CDN-Forward
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Vcache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-DataDome
X-HTML-Minification-Powered-By
Accept-Language
X-Tt-Trace-Host
X-Datadog-Sampled
X-Mg-Request-UUID
X-Tt-Trace-Tag
X-Amzn-Remapped-Content-Length
X-DynaTrace
X-Debug-IsConnected
X-Debug-IsPreview
X-ID
X-Nf-Request-Id
X-Generated-By
X-DynaTrace-JS-Agent
Countrycode
Xet-Cookie
Backend
X-B3-SpanId
X-ECache
X-B-Cache
X-Signature
CF-IPCountry
Liferay-Portal
X-WP-CF-Super-Cache
Webserver
X-WP-CF-Super-Cache-Cache-Control
Xserver
X-Httpd
X-MCACHE
X-Tt-Logid
X-Mode
X-NYM-Debug-Backend
X-Erf-Web-Scheduler
X-Device-Type
X-Drupal-Cache-Contexts
X-Servername
X-Content-Powered-By
Url
X-Content-Age
X-Xrds-Location
X-Zen-Fury
X-Nginx-Cache
X-UPSTREAM-Address
X-Director
X-Sucuri-ID
X-Cache-Action
X-Container-Uri
X-Varnish-Cache-Hits
X-Git-Commit
X-GeoCountry
X-GeoCode
X-Tb
X-JoinUs
X-Urbn-Context-Path
X-Urbn-Site-Id
X-LAGOON
X-SayCDN-TTL
Filters
Fastcgi-Useragent
Load-Balancing
S-Rt
Meta-Geo
Azure-Version
Azure-SlotName
X-Cache-Operation
Azure-InstanceId
Azure-RegionName
Azure-SiteName
X-Say-Cacheable
Locale
X-ServerID
X-Rewrite-Enabled
X-Proto
X-Say-TTL
X-SaId
X-Sucuri-Cache
Onion-Location
X-PHP-Host
X-Soup
X-Cluster-Node
X-Labrador-Cache-Channel
X-RM-Cache-TTL
GEO-INFO
X-Forwarded-Host
X-Varnish-Hostname
X-VC-Cache
Uber-Trace-Id
X-Ms-Version
X-Detected-As
X-Ms-Request-Id
X-Logging-Id
X-Generation-Time
X-Cache-Server
X-Adobe-Source
X-VCT
X-Sql-Duration-Ms
X-Sql-Count
CDN-RequestId
Web-Mar-Node
X-Storage
TWC-Locale-Group
TWC-Privacy
TWC-GeoIP-LatLong
TWC-GeoIP-Country
Node
Mn-Server-Ip
Property-Id
TWC-Connection-Speed
TWC-Device-Class
Webcakes-App-Name
X-Extlb
X-Routing-Service
X-RCS-CacheZone
X-Served-From
X-Skip-Cache
X-Zipkin-Id
X-R9-Blue-Green-Version
X-Proxied
Webcakes-Region
X-Debug
DB-Nickname
X-FB-TRIP-ID
Webcakes-App-Version
X-Origin-Hint
X-LSADC-Cache
X-Format
X-Uri
X-Tumblr-Pixel-3
X-Tumblr-Pixel-2
X-Fetched-On
X-Lambda-Id
X-Proxy-Build
Selected-Fe
Fastly-Drupal-HTML
X-Timing-Wait
OT-Force-Account-Verify
Source
X-Origin-Date
X-Ratelimit-Reset
X-Template
X-MP-GENERATED-AT
X-XRDS-LOCATION
X-Cache-Expired-At
X-Tncms
X-Cache-Hit
X-Loop
X-Tec-Api-Root
X-Tec-Api-Version
X-Tec-Api-Origin
X-Varnish-Hits
X-Endurance-Cache-Level
X-Pass-Why
X-Via-JSL
Content-Secure-Policy
X-Srv
X-Ua
X-UA-Device-Type
X-Redis-Cache
X-NGENIX-Cache
X-Cache-TTL-Remaining
X-Node-Name
Upgrade-Insecure-Requests
X-Pubstack
Cross-Origin-Window-Policy
X-AIR-PT
X-Real-IP
X-Fastly-Request-Id
X-Origin-CC
X-Origin-TTL
Section-Io-Origin-Status
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
X-Server-W
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
NGB
X-GEO
X-PHP-Backend
X-CACHE-AGE
Cache-Hits
Cache-Provider
X-Rn-Rsrv
X-Cache-Host
X-S
Cache-Name
CDN-RequestPullCode
CDN-RequestCountryCode
CDN-PullZone
CDN-CachedAt
CDN-EdgeStorageId
CDN-RequestPullSuccess
MS-CV
X-RTag
CDN-Uid
CDN-Cache
Ms-Operation-Id
X-Restarts
X-Xfnlog-Site
X-Reqid
X-Aspnetmvc-Version
X-TimeS
X-Presslabs-Stats
X-Hl-Ver
X-IPLB-Instance
Apigw-Requestid
X-IPLB-Request-ID
X-Optimistic-Header
X-Cms-Context
X-Cache-Type
X-Datadome
X-Akamai-Transformed
X-BYPASS-REASON
X-TA-CDN-Provider
X-CSRF-Token
X-ProxyCache-Key
X-No-Session
X-ProxyCache-Status
X-Parent-Response-Time
X-Newrelic-Synthetics
DCR-Processing-Time-Ms
X-Dispatcher-Number
Magicmarker
X-SRCache-Key
Mail-Subject
Server-Host
DCR-Decision-By
CPC-Cache
X-Orig-Expires
X-Developer
True-Client-Country-4JS
T-Server
Surrogated-Key
Sslversion
Fastly-Backend-Name
CPC-Age
Candidate-Md5Url
Canary
Lang
Rendered-Blocks
HA-Ipaddr
N-Cache
Ha-Gx-Prefs
X-Ec-Fail
X-Ec-Custom-Error
L5d-Success-Class
L
Meta-Geo-Continent
MD5-Digest
Gh-Request-Id
X-Slack-Backend
Redirect-Candidate
X-Shop-Environment
X-Slack-Shared-Secret-Outcome
Odigeo-Trace-Id
Ngx.Var.Host
Gannett-Cam-Experience-Id
Fastly-SSL
Fastly-GeoIP-CountryCode
X-Origin-Time
X-Fastly-Backend
X-Bc-Bl
X-BCube-Filmed-By
X-Bl-Debug
X-D
X-Cache-Bucket
X-B-Cookie
X-Application
BehaviorPad-Version
X-Request-Host
X-Eu-Site
X-Has-Esi
X-External-Request-Id
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-RateLimit-Remaining-Second
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-CGP
X-Policy
X-Csrf-Jwt
X-Conf
X-Cdn-Diag
X-Forwarded-Path
X-Cache-Info
X-Gdpr
X-Cache-NE
X-RateLimit-Limit-Second
X-CacheTTL
X-Aed
X-Epic-Correlation-Id
Web-Mar-Region
We-Hiring
X-S-Cookie
X-A
X-A-Dam
X-A-Ccd
W
VNS-Cache
X-ScT
X-Nyt-Route
Vix-Hermes-Req-Id
VNS-Age
X-Destination
X-Mvc-Supplant-Cachable
X-FC-Vary-Parameters
X-Accel-Expires-Debug
X-Debug-Cache-Store
X-Ec-GeoHdr
X-Debug-Cache-Fetch
X-Date
X-Rojux
X-Accel-Buffering
X-A-Wwc
X-A-Dcw
X-JWT-State
X-Is-Gdpr
X-A-Dgt
X-Irp-Debug
X-SD-PageType
X-Tenant
X-Via-Fastly
X-Vtex-Remote-Cache
X-VWS-Id
X-Viewer-Country
X-Vdms-Version
X-VG-WebCache
X-We-Are-Hiring
X-Wikidot-Static-Cache
X-Cluster
X-AWS-Id
Xc-Version
X-Worker
X-LJ-Flow-ID
X-Wix-Viewer-Type
X-Vdms-Path
X-Wikidot-Backend
X-TIM-N
X-TIME
X-Access
X-Section
X-PERF
X-Request-Time
X-VServer
X-S-Maxage
X-Alternate-Cache-Key
X-Hash
X-Handled-By
X-Proxy-Cache-Status
X-Thinkindot-L3
X-Human
X-WADP-Cache
X-Gzip
X-INCAP-ABP
Req-Svc-Chain
X-ShopId
X-Level-Front-Cache
Release
X-Loc
X-PAYTM-SRV-ID
X-Vmg-Version
Thinkindot-CacheControl-Type
Thinkindot-Control
Thinkindot-CacheControl
TDXMobile
X-ShardId
X-ApacheServer
X-Up
X-CMSURLCustom
X-Fmm-Version
X-Clientip
X-Clara-WADP
X-Forwarded-Site
X-Core-Mission
X-Core-Value
X-DefHash
X-DPWN-IS-SECURE
X-DefElseHash
X-Esi-Check
X-Platform
X-Cdn-Origin
X-App
AKAMAI
Adler-Geo
X-BBC-Edge-Cache-Status
X-Auto-Login
Producers
X-Geo-Header
X-Generated-On
X-Test
X-Pool
X-Qloud-Router
X-Cache-Id
X-Cache-Debug
X-App-Name
X-Server-IP
X-Sn-Servicetimems
X-Node-Id
X-Origin-Response-Time
X-Mid
Host-ID
X-VG-TLSProxy
Memcached
Environment
X-SVT-ORM-VERSION
X-Sorting-Hat-PodId
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
Expect-Staple
X-Mly-Id
X-Varnishpool
X-Nitro-Cache
Is-Eu
Origin
X-Storefront-Renderer-Rendered
X-SVT-ORM-RULES
Platform
X-Var-Ttl
X-Owner
X-Old-Content-Length
Machine
X-Variation
X-Org
Datacenter
Cmsid
X-Sorting-Hat-ShopId
X-Shopify-Stage
Cmstype
User-Cache-Control
Apple-News-Services-Handled
Apple-News-Services-Host
X-Origin
X-Nginx-Cache-Key
X-GeoIP
X-From
Country-Code
X-Thanos
CloudFront-Viewer-Country
CDCHOST
X-Device-Os
X-Cdn-Srv
DSUID
X-Gen-Mode
X-Block-Status
Esi-Enabled
X-Nananana
X-NodeID
X-Bip
X-Akamai-Device-Characteristics
NM-Fastcgi-Cache
Apple-News-Services-Request-Url
X-Dispatcher-Server
X-Hnp-Log
Server-Ext
X-Scale
X-WA-Info
ServedBy
Sever-Int
Apple-News-Services-Parsed-Url
X-Mvc-Supplant-OutputCached
Server-Hostname
X-Vcl-Version
X-Tx-Id
Server-Info
C-Via
X-Op-Id-All
X-LB-NoCache
Ssr
X-Web-Node
X-Instance-Name
X-Cache-Enabled
X-NCache
Wxu-Next-Region
X-Refresh
WP-Super-Cache
Wxu-Next-Hostname
Wxu-Next-Commit
Origin-EX
Pics-Label
Origin-CC
X-Air-Trace-Id
X-Air-Hostname
X-Air-Source
Server-ID
X-Amz-Meta-Cb-Modifiedtime
X-Azure-Ref-OriginShield
Memory
X-Cs
Time
X-HA-Backend
Hostname
X-ZONE
X-API-Version
Origin-Agent-Cluster
X-Platform-Processor
Cf-Device-Type
X-Platform-Router
X-Platform-Cluster
X-Cache-Status-Check
X-Microcachable
GeoIP-Latitude
Cache-Host
X-Origin-Expires
X-URL
NGX
X-Correlation-ID
X-VHOST
AMP-Access-Control-Allow-Source-Origin
X-Tb-Optimization-Total-Bytes-Saved
X-CACHE-GROUP
XM
X-Locale
X-Site-Version
X-DC
X-HN
PFcat
X-VarnishDD-TTL
X-Dc
X-Wp-Cf-Super-Cache-Active
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Fpc
Resin-Trace
X-Ad-Defer-Variation
X-Via-CDN
Srvid
X-Via-Edge
X-Webkit-Csp-Report-Only
X-Via-SSL
A
X-Vgn-Hpd-Reason
X-FL-QIT-DEBUG
Locid
Edge-Copy-Time
X-Internal-Host
X-Micro-Cache
X-FL-EDGE
Cdn-Requestid
X-Zone
X-WP-CF-Super-Cache-Active
X-Contensis-Viewer-Groups
X-Upstream-Ct
X-Upstream-Ht
X-ATG-Version
YJS-ID
X-TraceId
X-Pod-Name
X-FireWall-Port
X-Github-Request-Id
X-Cache-ASPX
X-DataCenter
Sid
Cache-Key
X-AB
X-Varnish-Authentication
X-SIPLIST1
X-Cached-By
X-Moov-Xdn-Version
Uri
X-Moov-T
User-Agent
IsBot
X-Buckets
X-NGINX-Cache
X-LiteSpeed-Cache-Control
Location
X-Info
True-Client-Ip
X-B3-Parentspanid
X-Geo-Region
X-B3-Spanid
X-Backend-Instance
GeoIP-Country-Code
X-Accel-Version
X-Platform-Server
GeoIp-Country-Code
X-Nitro-Rev
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Nitro-Cache-From
X-Planisys-CDN-TTL
State
X-FTR-Request-ID
X-HS-Content-Campaign-Id
SID
X-LiteSpeed-Tag
X-Provided-By
X-CSRF-TOKEN
X-Release
CF-Ctrl
X-MSEdge-Flight
X-MSEdge-Features
X-Fastly-Cache
X-CS
X-VCache
X-Browser-Name
X-RN-RSRV
X-Rocket-Build-Number
X-VC
True-Client-IP
NtCoent-Length
X-Sigma-Backend
XServer
X-Is-Desktop
Cdn
X-Is-Mobile
X-Is-Tablet
X-Tcp-Rtt
X-Datacenter
X-Is-Supported-Browser
X-Cache-Remote
X-Sigma
X-NewRelic-App-Data
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Ssi
Cache
Path
X-Vgn-Hpd-Variations-Key
X-Geo
X-Api-Version
Lb
X-Gamma-Serve
X-SRV
X-Hyper-Cache
X-HS-Status
X-GeoIP-City
X-Scheme
X-Generated-In
X-TRACE-ID
CountryCode
X-FPC
Epwk-X-Cache
Fastly-Drupal-Html
Tcn
X-HostName
X-GoCache-CacheStatus
X-Frame-Option
Cache-Tv-Group
Ohc-File-Size
X-Service
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-UA
Serverid
X-APP-VERSION
Cf-Ipcountry
Kp-EeAlive
X-Webstats-RespID
X-Amz-Meta-Opti
Cdnsip
X-Esi
X-Air-Pt
Cdncip
X-AK-Request-ID
X-Guploader-Uploadid
Srv
X-Wp-Cf-Super-Cache-Cache-Control
X-Location
X-Branch-Name
WebServer
HostName
X-Cache-Ttl
X-Wp-Cf-Super-Cache
X-Traceid
X-Mobile-URL
X-Wp-Cf-Super-Cache-Cookies-Bypass
LB
X-Edge-Server
X-Region-Sid
Yak-Timeinfo
X-Cache-Tags
X-Aicache-OS
Env
WZWS-RAY
Cdn-Request-Time
X-EC-Lua
CacheControlHeader
X-Vc
X-Vercel-Cache
Proxy-Connection
X-Developers
X-Men
X-Vercel-Id
Ohc-Cache-HIT
X-Pad
X-Proxy-CacheRZ
X-Cdn-Cache-Status
XkeyRZ
On-Server
Cdn-Host
X-VCL-Version
X-Origin-Cache-Key
X-TX-ID
CDN
X-CACHE-KEY
Tube-Got-Eval
Tube-Got-Results
X-Akamai-Pragma-Client-IP
Tube-Return
X-Servedbyhost
Mime-Version
Tube-Get-Contents
X-Cdn-Forward
RNT-Machine
RNT-Time
V-Age
X-Cache-FS-Status
X-FTR-Backend-Server
X-CDN-Cache-Status
X-FTR-Cache-Status
X-B3-Trace-ID
X-FTR-Balancer
X-NMSegId
X-Acquia-Purge-Cdn-Unconfigured
X-FTR-Expires
X-Req
X-SB
Click-Count-Error
X-Via-Poph
X-Nc
X-NWS-UUID-VERIFY
X-Via-Popn
X-Via-Popv
Ngx
X-LB-ID
X-Wa
X-Edge-Pop
X-V-Cache
X-Minions-Version
X-FTR-Backend
Click-Count-Action-Start
M-TraceId
X-Cdn-Request-ID
X-Country-Code-Real
Req-ID
Geoip-Latitude
X-Lb-Cache
X-Ha-Backend
X-Ad-Load-Variation
Content-Style-Type
Cluster
Server-Id
WWW-Authenticate
X-Fastly-Country-Code
X-WP-CF-Super-Cache-Cookies-Bypass
Content-Script-Type
CF-Cached-On
ENV
X-TT-LOGID
X-MiniProfiler-Ids
X-Snapshot-Date
X-Lb-Nocache
X-Check-Cacheable
X-IN-APIGATEWAY
X-Request-Start
X-Scope-Id
Pramga
X-User
X-Dw-Trace-Id
X-IN-APIGATEWAYSSL
X-Edge-POP
PICS-Label
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Via-Ucdn
X-Acquia-Site
X-Acquia-Purge-Tags
Yjs-Id
X-Cached-Since
X-APP
X-Ckpd-Fst-Backend
Log-Origin
X-M-Reqid
X-Shield-Cache-Expires
X-Request-URI
X-Litespeed-Cache-Control
X-ElasticPress-Query
X-RAMCache
X-Processor
Vha6-Origin
X-Fastly-Backend-Reqs
X-Fastly-Cache-Hits
X-Miniprofiler-Ids
Cneonction
X-Iauth-Set-Uid
X-TH-Server
X-M-Log
CACHE-MISS-TO-ORIGIN
Inserted-Into-Cache-At